Firetruck

CVE-2018-7841

KEV

Schneider Electric U.motion Builder SQL Injection Vulnerability

View CVE record →
Vendor / Project
Schneider Electric
Product
U.motion Builder
Date added
Apr 15, 2022
Due date
May 6, 2022
Known ransomware use
Unknown
CWEs
CWE-89

Description

A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes